Start a lab
lab_upStarts a Docker lab with strict policies: no privileged services, no host mounts, no Docker socket, 1 CPU/512MB per service, no internet. Refuses non-compliant labs and requires user confirmation.
Instructions
Start a lab under lab mode's policy: no privileged services, no host mounts but the lab's own folder, never the Docker socket, limits of 1 CPU and 512m per service, without internet (so the host can't reach its ports either: check it from inside with lab_exec). A lab that breaks the policy is refused with the reason. Confirm with the person first, saying what it will run (its services and images).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| lab | Yes | The lab's name, as list_labs gives it |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| lab | Yes | ||
| services | Yes |